Privacy Policy

1.- Who is responsible for the processing of your data?

The data controller for your personal data is BLACK JAGUAR, S.L. (hereinafter "BLACK JAGUAR"), with Tax Identification Number (C.I.F.) B21861844 and registered office at C/ Costanilla de los Angeles 2, Escalera Izquierda 2D, Madrid (28013), registered in the Madrid Mercantile Registry (Daily Log 2025, Entry 8211, Registration 1, Sheet M-851722).

This Privacy Policy governs access to and use of the App and Website (hereinafter, the "Platform") made available by BLACK JAGUAR to Internet users (hereinafter, the "Users") interested in the content (hereinafter, the "Content") and services (hereinafter, the "Services") offered by BLACK JAGUAR thereon.

Contact email: privacidad@blackjaguar.es

2.- Recommendations

Please read carefully and follow the recommendations below:

• Keep your device equipped with properly updated antivirus software to protect against malicious software and spyware applications that could compromise your internet browsing and the information stored on your device.
• Read and review this Privacy Policy and all legal texts made available by BLACK JAGUAR on the Platform.

3.- Information regarding the data that BLACK JAGUAR collects through the Platform

For the proper functioning of the Platform, BLACK JAGUAR may access the following data provided, where applicable, by the User:

• Identification details: full name, date of birth.
• Contact details: phone number.
• Profile data: hobbies, employment, interests, preferences, profile photo, "about me" information, and location; obtained exclusively through the use of specific platform features that are—in all cases—manually activated and deactivated by the user, and are therefore optional.

4.- For what purposes and on what legal basis are your personal data processed?

BLACK JAGUAR takes the protection of your privacy and personal data very seriously. For this reason, your personal data is stored securely and treated with the utmost care, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "General Data Protection Regulation" or "Data Protection Regulation" or "GDPR").

This Privacy Policy governs access to and use of the service that BLACK JAGUAR makes available to interested Users via its Platform. The legal basis legitimizing the processing of personal data by BLACK JAGUAR will depend on the nature of the User's interaction with the Platform and the specific purpose of the processing, in accordance with Article 6 of the GDPR, as detailed below:

Regarding the User's consent, the User may withdraw their consent at any time by sending a message to the following email address: hola@blackjaguar.es without affecting the lawfulness of processing based on consent before its withdrawal.

5.- Accuracy of the data provided by Users

The User guarantees the accuracy of the personal data provided and undertakes to notify BLACK JAGUAR of any changes thereto. The User shall be liable for the accuracy of the data provided; BLACK JAGUAR reserves the right to exclude from the services any User who has provided false data, without prejudice to any other legal actions that may apply.

Users are advised to protect their data with the utmost diligence by using appropriate security tools. BLACK JAGUAR shall not be liable for any theft, unauthorized modification, or loss of data.

Any modification or update to the data must be communicated to BLACK JAGUAR via the communication channels provided for in this Privacy Policy.

6.- Data retention

Protecting Users' privacy and personal data is important to BLACK JAGUAR. Therefore, BLACK JAGUAR makes every effort to prevent the improper use of User data. Only authorized personnel have access to User data.

The User's personal data will be retained in BLACK JAGUAR's database for the processing purposes for which they were provided, provided the User has not revoked their consent by requesting the deletion of their account or the erasure of specific personal data from the Platform. Subsequently, if necessary, the information will be kept in a blocked state for the legally established periods.

BLACK JAGUAR commits to fulfilling its obligation of secrecy and confidentiality regarding personal data, in accordance with applicable legislation.

7.- User rights

Users have the right to:

• Access your personal data;
• Request the rectification of any inaccurate data;
• Request the deletion of your data;
• Request the restriction of the processing of your data;
• Request the restriction of the processing of your data;
• Request the portability of your data.
• Likewise, Users shall have the right not to be subject to decisions based solely on automated data processing.

The User may exercise all these rights at the following email address: hola@blackjaguar.es indicating the reason for your request.

The User may also send their request by regular mail to the following address: C/ Costanilla de los Angeles 2, Escalera Izquierda 2D, Madrid (28013).

To facilitate the processing of the application, it is recommended that the communication include the following information:

• Full name of the data subject, address, and email address to communicate the response to their request.
• Documents proving the identity or, where applicable, the legal representation of the personal data subject.
• A clear and precise description of the personal data regarding which the exercise of any of the aforementioned rights is sought.
• Any other element or document that facilitates the location of the personal data.
• In the case of requests for the rectification of personal data, the data subject must specify the modifications to be made and provide documentation supporting the request.

Including this information is recommended to expedite the process but is not mandatory. BLACK JAGUAR will process any legitimate request, even if minimal information is provided, and may request additional information only if necessary to verify the requester's identity.

Without prejudice to any other administrative or judicial remedy, the User shall have the right to lodge a complaint with a supervisory authority—particularly in the Member State of their habitual residence, place of work, or place of the alleged infringement—if they consider that the processing of their personal data does not comply with the regulations, or if the exercise of their rights has not been satisfactorily addressed. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint.

8.- Data security

Protecting Users' privacy and personal data is of great importance to BLACK JAGUAR. Therefore, BLACK JAGUAR has taken all measures within its power to prevent the misuse of such data, restricting access to authorized personnel only.

BLACK JAGUAR maintains appropriate security measures to protect personal data in accordance with applicable legislation and has implemented all technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of data provided by the User through the Platform, while noting that Internet security measures are not impregnable.

BLACK JAGUAR commits to fulfilling the duty of secrecy and confidentiality regarding personal data in accordance with applicable legislation.

BLACK JAGUAR shall not be liable for any damages arising from the User's failure to comply with this obligation.

9.- Transfers and/or assignments to third parties

No disclosure of Users' personal data to other data controllers or international data transfers are envisaged, except as indicated below regarding the data processors we engage.

When a data processor is required to provide a service essential to the platform's operation, BLACK JAGUAR has implemented appropriate contractual measures to protect your personal data. If such a processor is located outside the European Economic Area, BLACK JAGUAR will also take measures to ensure that the processing complies with appropriate safeguards—such as the processor being located in a third country recognized as providing an adequate level of protection (based on lists published by the European Commission or the Spanish Data Protection Agency (AEPD), as applicable) or meeting other measures approved under the GDPR.

Our team members and the collaborators working at or for BLACK JAGUAR are required to maintain the confidentiality of the personal data to which they have access.

10.- Questions

If you have any questions about our Privacy Policy, please contact us by sending an email to privacidad@blackjaguar.es.

Furthermore, if you consider that your rights are not being duly safeguarded, you have the right to lodge a complaint with the Spanish Data Protection Agency; its contact details are: telephone 900 293 183; postal address C/ Jorge Juan 6, 28001 Madrid; electronic office https://sedeagpd.gob.es/sede-electronica-web/ and Application www.agpd.es.

11.- Acceptance and Consent

The User declares having been informed of the conditions regarding personal data protection, accepting and consenting to the processing thereof by BLACK JAGUAR in the manner and for the purposes indicated in this Privacy Policy.

Privacy Policy – ​​Black Jaguar S.L. (Europe)

Data Controller: Black Jaguar S.L. (CIF: B21861844)
Home: Calle Costanilla de los Ángeles 2, ESC, IZQ, 2 derecha A, 28013, Madrid, España
Contact email: hola@blackjaguar.es | DPO: José Manuel Sahagún Asencio (jsahagun@sahagunabogados.es)
Primary jurisdiction: España, Madrid | Website: www.blackjaguar.es
Date: 26 of september of 2025 Version: 1.0

Index

1. Scope and regulatory framework
2. Data we process
3. Purposes and legal bases for processing
4. Automated decision-making and profiling
5. Recipients and data processors
6. International data transfers
7. Rights of users
8. Data retention
9. Information security
10. Minors
11. Cookies, SDKs, and similar technologies
12. Digital Services Act (DSA): integrity and safety
13. Changes to this policy
14. Contact and complaints with the AEPD
15. Processing of particularly sensitive data

1. Scope and regulatory framework

This Privacy Policy applies to the Black Jaguar website and mobile application (the "Services"). It is governed by Regulation (EU) 2016/679 (GDPR), Organic Law 3/2018 (LOPDGDD), the LSSI-CE, and the ePrivacy Directive.

This version is effective as of the date indicated above and replaces previously published versions.

2. Data we process

We process the following categories of data, which you provide or which are generated through the use of the Services:

• Account details: phone number, email, date of birth, language, country.
• Profile data: name/alias, photos, videos, biography, interests, approximate location, and preferences.
• Potentially sensitive data (with your explicit consent): orientation/interests, health data you choose to provide, ethnic origin, beliefs, etc.
• Content and communications: publications, messages, reports, and associated metadata.
• Purchase data: transactions, product purchased, amount, date, and method (when payment is not handled by third parties).
• Customer service and moderation: inquiries, issues, and evidence for investigating non-compliance.
• Technical data/usage: IP, device identifiers, operating system, logs, app/web events, interactions, referrer/UTM.
• Precise geolocation (if enabled): latitude/longitude for location-based features.
• Verification data: image/selfie for verification, identity document (if requested).

3. Purposes and legal bases for processing

We process your data for the following purposes and in accordance with the legal bases set out in Article 6 of the GDPR:

• a) Service provision and support (account creation, profile, features, messaging, technical support). Legal basis: performance of the contract (Art. 6.1.b).
• b) Security, integrity, and fraud/abuse prevention (detection, investigation, and blocking of illicit conduct; anti-spam measures). Basis: legitimate interest (Art. 6.1.f) and compliance with legal obligations (Art. 6.1.c).
• c) Content moderation and DSA compliance (notice and action, mitigation measures). Basis: legal obligation (Art. 6.1.c) and legitimate interest (Art. 6.1.f).
• d) Informational and operational communications. Basis: performance of the contract (Art. 6.1.b).
• e) Marketing and personalization (including first-party and third-party advertising, subject to consent). Basis: consent (Art. 6.1.a) and legitimate interest in direct marketing (Art. 6.1.f), as applicable.
• f) Product analytics and improvement, studies and research (including machine learning). Basis: legitimate interest (Art. 6.1.f).
• g) Compliance with legal obligations, exercise or defense of claims. Basis: legal obligation (Art. 6.1.c) and legitimate interest (Art. 6.1.f).
• h) Processing of special categories (if provided): only with explicit consent (Art. 9(2)(a) GDPR).

You may withdraw your consent at any time via your account or app settings, or by writing to our DPO.

4. Automated decision-making and profiling

To recommend profiles and improve the experience, we use automated systems and profiles based on your activity, approximate location, and preferences. We do not make decisions that produce significant legal effects based solely on automated processing without human intervention.

5. Recipients and data processors

We share data with:

• Service providers/processors (hosting, messaging, analytics, customer support, verification, payments). Contracts are formalized in accordance with Art. 28 of the GDPR.
• Payment providers (Apple/Google and gateways). For purchases made via platforms, the platforms act as independent controllers.
• Authorities and security forces/public administrations, where there is a legal obligation or valid request.
• Third parties involved in corporate transactions (mergers/sales), subject to appropriate safeguards and, where applicable, prior notification to the user.

6. International data transfers

If data is transferred outside the EEA/UK/Switzerland, we apply appropriate safeguards: European Commission Standard Contractual Clauses, supplementary measures, and, where applicable, Binding Corporate Rules or another basis permitted by the GDPR.

7. Rights of users

You can exercise the rights of access, rectification, deletion, opposition, limitation and portability, as well as withdraw consent, by directing a request to hola@blackjaguar.es or to our DPO. You must prove your identity when necessary.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country.

8. Data retention

We retain data for as long as your account remains active and, following account closure, for the applicable statutory limitation periods. Support and security data will be retained for the time necessary to investigate and prevent abuse. Billing data will be retained in accordance with tax and accounting regulations.

9. Information security

We implement appropriate technical and organizational measures: encryption in transit and at rest where applicable, least-privilege access control, access logging, periodic testing and audits, and vulnerability management. We will notify breaches in accordance with Articles 33 and 34 of the GDPR.

10. Minors

Use of the Services is limited to individuals aged 16 or older in the EU. If we detect accounts belonging to minors, they will be closed and the data deleted.

11. Cookies, SDKs, and similar technologies

We use cookies and similar technologies (SDKs, pixels) for technical, analytical, and—subject to your consent—advertising purposes. You can manage your consent via the cookie banner and the app settings. Please consult the Cookie Policy for further details.

12. Digital Services Act (DSA): integrity and safety

We have mechanisms in place for the notification of and action against illegal content, proportionate moderation measures, and transparency regarding procedures, in compliance with Regulation (EU) 2022/2065 (DSA).

13. Changes to this policy

We may update this Policy to reflect legal, technical, or operational changes. In the event of material changes, we will notify you by reasonable means.

14. Contact and complaints to the AEPD

Responsible: Black Jaguar S.L. (CIF: B21861844) – Calle Costanilla de los Ángeles 2, ESC, IZQ, 2 derecha A, 28013, Madrid, España – hola@blackjaguar.es
DPO: José Manuel Sahagún Asencio (jsahagun@sahagunabogados.es)
Supervisory authority in Spain: Spanish Data Protection Agency (www.aepd.es).
European Online Dispute Resolution (ODR) platform: https://ec.europa.eu/odr

15. Processing of particularly sensitive data: sexual orientation, sexual life, and biometrics

In the context of the services provided by Black Jaguar S.L., we may process data belonging to special categories—solely when you choose to provide them voluntarily—in accordance with Article 9 of Regulation (EU) 2016/679 (GDPR).

This data may include:

• Sexual orientation and/or sexual life, to the extent that you decide to reflect them in your profile or conversations.
• Biometric data (e.g., facial geometry for selfie verification, images of official identification).
• Other sensitive data that you might enter into your profile or communications and that reveal information about your health, beliefs, ethnic origin, or convictions.

Legal basis for processing

The processing of this sensitive data is carried out exclusively with your explicit consent (Art. 9(2)(a) GDPR), expressed through the affirmative action of including it in your profile or conversations, or by accepting verification processes.

Purpose of processing

• Ensure service personalization by making it possible to display information about yourself to create meaningful connections.
• Identity and security verification (in the case of biometric data).
• Moderation and prevention of abuse, in compliance with our Terms of Use and legal obligations under the Digital Services Act (DSA).

User rights

You can:

• Withdraw your consent at any time via the application settings or by requesting it from the DPO.
• Delete or modify sensitive data in your profile.
• Exercise their rights of access, rectification, erasure, restriction, or objection regarding such data, in accordance with the procedure described in this Policy.

Protection measures

This data is handled using enhanced security measures (encryption, strict access controls, audits) and is retained only for the time necessary for the purposes described or for as long as your account remains active.